Privacy policy
This policy explains what information MasterCatalog collects, how it is used, and the choices people have. MasterCatalog ("MasterCatalog", "we", "us") provides a service that sends a merchant's product catalog to Google Merchant Center as a product feed. MasterCatalog is in private development and is used only by people we invite.
Information we collect
- Account information. When an invited person signs in, we receive their name and email address from our sign-in provider.
- Store catalog data. When a merchant connects an online store, we read its product catalog, such as product names, descriptions, prices, availability, images, and identifiers. Store access is read-only.
- Google Merchant Center data. When a merchant connects a Google Merchant Center account, we receive the list of Merchant Center accounts the signed-in person can access, the product data we submit, and the status and issues Google reports for those products.
- Credentials. Access tokens for connected stores and Google accounts, stored encrypted.
- Operational records. Records of what the service did, such as when a feed was sent and with what result.
How we use information
We use this information only to provide the service to the merchant who connected it: to build the merchant's product feed, send it to the merchant's own Merchant Center account, show product status, keep the feed current, secure accounts, and support the merchant. We do not sell personal information, and we do not use any of this information for advertising.
Google user data
MasterCatalog requests access to Google Merchant Center through Google's Content API scope. We use that access only to list the Merchant Center accounts the signed-in person can access, to create a product data source in the account the merchant selects, to submit, update, and remove that merchant's products in it, and to read the status and issues Google reports for those products.
MasterCatalog's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models. People at MasterCatalog do not read Google user data except with the merchant's permission for support, for security, or where the law requires it.
Sharing
We share information only with service providers that host and operate MasterCatalog on our behalf, under agreements that limit their use to providing their service: application hosting and database (Vercel, Convex), sign-in (Clerk), and email delivery (Resend). Product data is sent to Google because the merchant asked us to send it to their Merchant Center account. We may disclose information if the law requires it.
Retention
We keep information for as long as the merchant uses the service. Operational records are deleted automatically after 30 to 90 days. When a merchant disconnects a store or a Google account, we delete its credentials. When an organization is deleted, we delete its data.
Security
Credentials are encrypted, every request is checked against the signed-in person's access, and data from different organizations is kept apart.
Your choices
- You can disconnect a store or a Google Merchant Center account at any time inside MasterCatalog.
- You can revoke MasterCatalog's access to your Google account at any time at myaccount.google.com/permissions.
- You can ask us to access, correct, or delete your information by writing to the address below.
Children
MasterCatalog is a business service and is not directed to children.
Changes
If we change this policy, we will update the date above and, for material changes, tell the merchants who use the service.
Contact
Questions about this policy: privacy@mastercatalog.app.